EVM Rollup + DAL Nodes support

charts/tezos/scripts/chain-initiator.sh

@@ -4,17 +4,92 @@ until $CLIENT rpc get /chains/main/blocks/head/header | grep '"level":'; do
     sleep 2
 done
 
-set -x
 set -o pipefail
 if ! $CLIENT rpc get /chains/main/blocks/head/header | grep '"level": 0,'; then
     echo "Chain already activated, considering activation successful and exiting"
     exit 0
 fi
 
+# Substitute #fromfile with the hex encoded files in question.
+# This is for bootstrapped smart rollups.
+
+# Note that this is low-level string substitution with `read`
+# Due to the size of the hex-encoded kernel, using `sed` was not possible.
+
+PARAMETERS_FILE='/etc/tezos/parameters.json'
+TMP_PARAMETERS_FILE='/etc/tezos/tmp_parameters.json'
+
+# Pattern to search for
+pattern='fromfile#'
+
+# Buffer for characters
+buffer=''
+
+# Whether 'fromfile#' was detected
+detected_fromfile=false
+
+# Process each character
+while IFS= read -r -n1 char
+do
+  # Add the character to the buffer
+  buffer=$(printf "%s%s" "$buffer" "$char")
+
+  # If the buffer ends with the pattern
+  if [ "${buffer%"$pattern"}" != "$buffer" ]
+  then
+    detected_fromfile=true
+
+    # Clear the buffer
+    buffer=''
+
+    # Read the filename
+    filename=''
+    while IFS= read -r -n1 char && [ "$char" != '"' ]
+    do
+      filename=$(printf "%s%s" "$filename" "$char")
+    done
+
+    echo "Found kernel file: $filename"
+
+    # Check if file exists
+    if [ ! -f "$filename" ]; then
+      echo "Kernel file $filename not found!"
+      exit 1
+    fi
+
+    # Convert the file content to hex and append to the temp file
+    xxd -ps -c 256 "$filename" | tr -d '\n' >> $TMP_PARAMETERS_FILE
+
+    # Add a closing double quote
+    printf '"' >> $TMP_PARAMETERS_FILE
+  elif [ ${#buffer} -ge ${#pattern} ]
+  then
+    # Write the oldest character in the buffer to the temporary file
+    printf "%s" "${buffer%"${buffer#?}"}" >> $TMP_PARAMETERS_FILE
+
+    # Remove the oldest character from the buffer
+    buffer=${buffer#?}
+  fi
+done < "$PARAMETERS_FILE"
+
+# If there's anything left in the buffer, write it to the file
+if [ -n "$buffer" ]
+then
+  printf "%s" "$buffer" >> $TMP_PARAMETERS_FILE
+fi
+
+# Replace the original parameters.json file with the modified one only if 'fromfile#' was detected
+if $detected_fromfile; then
+  mv $TMP_PARAMETERS_FILE $PARAMETERS_FILE
+  echo "Updated JSON saved in '$PARAMETERS_FILE'"
+else
+  rm -f $TMP_PARAMETERS_FILE
+  echo "No 'fromfile#' detected in '$PARAMETERS_FILE', no changes made."
+fi
 echo Activating chain:
 $CLIENT -d /var/tezos/client --block					\
 	genesis activate protocol					\
 	{{ .Values.activation.protocol_hash }}				\
 	with fitness 1 and key						\
 	$( cat /etc/tezos/activation_account_name )			\
-	and parameters /etc/tezos/parameters.json 2>&1 | head -200
+	and parameters $PARAMETERS_FILE 2>&1 | head -200

charts/tezos/scripts/evm-proxy.sh

@@ -0,0 +1,9 @@
+set -ex
+
+TEZ_BIN=/usr/local/bin
+
+CMD="$TEZ_BIN/octez-evm-proxy-server run \
+  --rpc-addr 0.0.0.0 \
+  --rollup-node-endpoint  http://rollup-evm:8932"
+
+exec $CMD

charts/tezos/scripts/smart-rollup-node.sh

@@ -0,0 +1,17 @@
+set -ex
+
+TEZ_VAR=/var/tezos
+TEZ_BIN=/usr/local/bin
+CLIENT_DIR="$TEZ_VAR/client"
+ROLLUP_DATA_DIR="$TEZ_VAR/rollup"
+
+xxd -ps -c 0  /usr/local/share/tezos/evm_kernel.wasm   | tr -d '\n' > /var/tezos/smart-rollup-boot-sector
+CMD="$TEZ_BIN/octez-smart-rollup-node-alpha \
+  --endpoint http://tezos-node-rpc:8732 \
+  -d $CLIENT_DIR \
+  run operator for ${ROLLUP_ADDRESS} with operators ${OPERATOR_ACCOUNT} \
+  --data-dir ${ROLLUP_DATA_DIR} \
+  --boot-sector-file /var/tezos/smart-rollup-boot-sector \
+  --rpc-addr 0.0.0.0"
+
+exec $CMD

charts/tezos/templates/_containers.tpl

@@ -67,7 +67,7 @@
   {{- $_ := set . "localvars" (eq .image "utils") }}
 {{- end }}
 {{- if not (hasKey . "run_script") }}
-  {{- $_ := set . "run_script" (eq .image "octez") }}
+  {{- $_ := set . "run_script" (or (eq .image "octez") (eq .image "octez_debug") ) }}
 {{- end }}
 {{- if not (hasKey . "script_command") }}
   {{- $_ := set . "script_command" .type }}
@@ -88,6 +88,8 @@
 {{- $node_vals_images := $.node_vals.images | default dict }}
 {{- if eq .image "octez" }}
   image: "{{ or $node_vals_images.octez $.Values.images.octez }}"
+{{- else if eq .image "octez_debug" }}
+  image: "{{ or $node_vals_images.octez_debug $.Values.images.octez_debug }}"
 {{- else }}
   image: "{{ $.Values.tezos_k8s_images.utils }}"
 {{- end }}
@@ -211,7 +213,7 @@
 {{- define "tezos.init_container.chain_initiator" }}
   {{- include "tezos.generic_container" (dict "root"        $
                                               "type"        "chain-initiator"
-                                              "image"       "octez"
+                                              "image"       "octez_debug"
   ) | nindent 0 }}
 {{- end }}
 

charts/tezos/templates/activate-job.yaml

@@ -13,7 +13,7 @@ spec:
 {{- include "tezos.init_container.chain_initiator"    $ | indent 8 }}
       initContainers:
         - image: {{ .Values.tezos_k8s_images.utils }}
-          imagePullPolicy: IfNotPresent
+          imagePullPolicy: Always
           name: config-generator
           args:
             - config-generator

charts/tezos/templates/configs.yaml

@@ -58,6 +58,8 @@ data:
     {{- $_ := set $tacoinfraSigners $signerName (pick $signerConfig "accounts") }}
 {{- end }}
 {{ $tacoinfraSigners | default dict | mustToPrettyJson | indent 4 }}
+  OCTEZ_ROLLUP_NODES: |
+{{ $.Values.smartRollupNodes | default dict | mustToPrettyJson | indent 4 }}
 
 ---
 

charts/tezos/templates/octez-rollup-node.yaml

@@ -0,0 +1,218 @@
+{{- range $k, $v := .Values.smartRollupNodes }}
+
+apiVersion: v1
+kind: Service
+metadata:
+  name: evm-proxy-{{ $k }}
+  namespace: {{ $.Release.Namespace }}
+spec:
+  type: NodePort
+  ports:
+    - port: 8545
+      name: evm-proxy
+  selector:
+    app: evm-proxy-{{ $k }}
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: evm-proxy-{{ $k }}
+  namespace: {{ $.Release.Namespace }}
+spec:
+  podManagementPolicy: Parallel
+  replicas: 1
+  serviceName: evm-proxy-{{ $k }}
+  selector:
+    matchLabels:
+      app: evm-proxy-{{ $k }}
+  template:
+    metadata:
+      labels:
+        app: evm-proxy-{{ $k }}
+    spec:
+      containers:
+      - name: octez-evm-proxy
+        image: "{{ $.Values.images.octez }}"
+        imagePullPolicy: IfNotPresent
+        ports:
+        - containerPort: 8545
+          name: evm-proxy
+        command:
+          - /bin/sh
+        args:
+          - "-c"
+          - |
+{{ tpl ($.Files.Get "scripts/evm-proxy.sh") $ | indent 12 }}
+      securityContext:
+        fsGroup: 1000
+---
+{{- if $v.evm_proxy_ingress | default false }}
+{{- if $v.evm_proxy_ingress.enabled | default false }}
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: evm-proxy-{{ $k }}
+  namespace: {{ $.Release.Namespace }}
+{{- with $v.evm_proxy_ingress.labels }}
+  labels:
+    {{- toYaml . | nindent 4 }}
+{{- end }}
+{{- with $v.evm_proxy_ingress.annotations }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+{{- end }}
+spec:
+  ingressClassName: {{ $v.evm_proxy_ingress.className }}
+  {{- if $v.evm_proxy_ingress.tls }}
+  tls:
+    {{- range $v.evm_proxy_ingress.tls }}
+    - hosts:
+        {{- range .hosts }}
+        - {{ . | quote }}
+        {{- end }}
+      secretName: {{ .secretName }}
+    {{- end }}
+  {{- end }}
+  rules:
+    - host: {{ $v.evm_proxy_ingress.host }}
+      http:
+        paths:
+          - pathType: ImplementationSpecific
+            path: /*
+            backend:
+              service:
+                name: evm-proxy-{{ $k }}
+                port:
+                  name: evm-proxy
+{{- end }}
+{{- end }}
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: rollup-{{ $k }}
+  namespace: {{ $.Release.Namespace }}
+spec:
+  type: NodePort
+  ports:
+    - port: 8932
+      name: rollup
+  selector:
+    app: rollup-{{ $k }}
+---
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: rollup-{{ $k }}
+  namespace: {{ $.Release.Namespace }}
+spec:
+  podManagementPolicy: Parallel
+  replicas: 1
+  serviceName: rollup-{{ $k }}
+  selector:
+    matchLabels:
+      app: rollup-{{ $k }}
+  template:
+    metadata:
+      labels:
+        app: rollup-{{ $k }}
+    spec:
+      containers:
+      - name: octez-smart-rollup-node
+        image: "{{ $.Values.images.octez_debug }}"
+        imagePullPolicy: IfNotPresent
+        ports:
+        - containerPort: 8932
+          name: rollup
+        command:
+          - /bin/sh
+        volumeMounts:
+        - mountPath: /var/tezos
+          name: var-volume
+        args:
+          - "-c"
+          - |
+{{ tpl ($.Files.Get "scripts/smart-rollup-node.sh") $ | indent 12 }}
+        env:
+          - name: ROLLUP_ADDRESS
+            value: {{ $v.rollup_address }}
+          - name: OPERATOR_ACCOUNT
+            value: {{ $v.operator_account }}
+      initContainers:
+      - image: {{ $.Values.tezos_k8s_images.utils }}
+        imagePullPolicy: IfNotPresent
+        name: config-generator
+        args:
+          - "config-generator"
+        envFrom:
+          - configMapRef:
+              name: tezos-config
+        env:
+          - name: MY_POD_NAME
+            value: {{ $k }}
+          - name: MY_POD_TYPE
+            value: {{ $.Values.smart_rollup_node_statefulset.pod_type }}
+        volumeMounts:
+          - mountPath: /var/tezos
+            name: var-volume
+          - mountPath: /etc/secret-volume
+            name: tezos-accounts
+      securityContext:
+        fsGroup: 1000
+      volumes:
+        - volume: var-volume
+          name: var-volume
+        - name: tezos-accounts
+          secret:
+            secretName: tezos-secret
+  volumeClaimTemplates:
+    - metadata:
+        name: var-volume
+      spec:
+        accessModes:
+          - ReadWriteOnce
+        resources:
+          requests:
+            storage: "15Gi"
+---
+{{- if $v.ingress | default false }}
+{{- if $v.ingress.enabled | default false }}
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: rollup-{{ $k }}
+  namespace: {{ $.Release.Namespace }}
+{{- with $v.ingress.labels }}
+  labels:
+    {{- toYaml . | nindent 4 }}
+{{- end }}
+{{- with $v.ingress.annotations }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+{{- end }}
+spec:
+  ingressClassName: {{ $v.ingress.className }}
+  {{- if $v.ingress.tls }}
+  tls:
+    {{- range $v.ingress.tls }}
+    - hosts:
+        {{- range .hosts }}
+        - {{ . | quote }}
+        {{- end }}
+      secretName: {{ .secretName }}
+    {{- end }}
+  {{- end }}
+  rules:
+    - host: {{ $v.ingress.host }}
+      http:
+        paths:
+          - pathType: ImplementationSpecific
+            path: /*
+            backend:
+              service:
+                name: rollup-{{ $k }}
+                port:
+                  name: rollup
+{{- end }}
+{{- end }}
+{{- end }}